Kavi Privacy Policy
This policy explains what information the Kavi app collects, how it is used, who it is shared with, and the choices you have.
1. Who we are
Kavi is provided by zpqv, inc. ("we", "us", "our"), 1606 Headway Cir STE 9354, Austin, TX 78754, United States. We are responsible for the personal information processed through Kavi, and for the purposes of the GDPR we are the data controller.
2. Who Kavi is for
Kavi is a business tool. Consultants, business analysts and their client stakeholders use it to run client engagements: capturing requirements in discovery sessions, designing business software, generating builds and reviewing feedback.
Kavi is not a consumer app. A new account must be approved before it can be used, and client stakeholders join by invitation.
3. Information we collect
Account and profile information
- Your name, email address, Kavi role and password. Your password is handled by Firebase Authentication and is never visible to us.
- Account status details: approval status, who approved or invited you, when you signed up, last signed in and were last active.
Content you add to Kavi
- Client and engagement details, including client names, contacts, websites and branding.
- Discovery session material: notes, photos you take or choose, audio recordings, uploaded documents and files, and the transcripts and text extracted from them.
- Requirements, designs, build specifications and other material created in Kavi.
- Discussions, posts, comments and reactions.
- Feedback you submit: your comments, rating, screenshots and images (including anything you draw on them), and the page you were on.
Information about people you invite
When you invite a collaborator or a client stakeholder, we collect the email address and name you enter so we can send the invitation and give them access.
Device and usage information
- Usage analytics: the screens you view and actions you take in the app, collected with Google Analytics for Firebase.
- Crash reports: on Android and iOS, crash and error details (such as device model, operating system version, app version and the error trace), collected with Firebase Crashlytics.
- Notification tokens: a push notification token for each device where you allow notifications.
- Activity records: a record of significant actions (for example creating, changing or deleting a record, or signing in), with who performed the action, when, and on which platform.
- Technical data: your IP address and browser or device information, which our hosting providers receive when your device connects to them.
Information stored on your device
Kavi keeps your sign-in session on your device. On the web this uses your browser's storage, and Google Analytics for Firebase sets analytics cookies.
4. Device permissions
Kavi asks for a permission only when you first use the feature that needs it. You can refuse or later revoke any permission in your device settings; only the related feature stops working.
| Permission | Why Kavi uses it |
|---|---|
| Camera | To take photos during discovery sessions. |
| Microphone | To record discovery session audio that you start yourself, so it can be saved and transcribed. |
| Photos and files | To choose images and documents you want to upload. Kavi only reads the items you pick. |
| Notifications | To tell you about activity that involves you, such as feedback, comments, mentions and build updates. |
5. How we use information
- To provide Kavi: create and manage your account, approve access, and store and sync your work across your devices.
- To control access, so that people only see the clients, engagements and builds they are permitted to see.
- To run the features you use, including transcription, text extraction and AI-generated requirements, designs and builds.
- To send invitations, notifications and service emails.
- To handle feedback and support requests.
- To keep Kavi secure, keep a record of significant actions, and prevent misuse.
- To find and fix crashes and errors, and to understand how features are used so we can improve them.
We do not use your information for advertising, and we do not sell it.
If you are in the European Economic Area or the United Kingdom, we rely on these legal bases: performing our contract with you or your organization (providing Kavi), our legitimate interests (security, record keeping, diagnostics and improving Kavi), your consent where it is required (such as device permissions and notifications), and legal obligations.
6. AI features
Several Kavi features use artificial intelligence: transcribing audio, reading text from images and documents, extracting brand details from a website, and generating requirements, designs and builds. When you use one of these features, the content it needs is sent to an AI model provider, which processes it and returns the result to us.
The AI model providers Kavi uses are OpenAI, Google (Gemini) and Anthropic. They process this content under their business (API) terms. We send only the content the feature needs.
8. How long we keep information
We keep your account, profile and content while your account is active. When you delete your account, it is handled as described in section 10. We may keep information for longer when the law requires it or to resolve a dispute.
9. Your choices and rights
- View and update: you can view and edit your profile in the app at any time.
- Permissions and notifications: you can turn off camera, microphone, photo or notification access in your device settings.
- Delete your account: see section 10.
- Other requests: depending on where you live (for example in the European Economic Area, the United Kingdom or California), you may have the right to access, correct, delete or receive a copy of your personal information, and to object to or restrict how we use it. Email support@tiram.ai to make a request. We may need to confirm your identity first, and we will not treat you differently for using these rights.
If you are in the European Economic Area or the United Kingdom, you also have the right to complain to your local data protection authority.
10. Deleting your account
You can delete your Kavi account at any time in the Android or iOS app: open your Profile, tap Delete Account, then confirm.
When your account is deleted you are signed out and can no longer sign in. Your account and profile information are removed instantly, and the account can never be used again.
Business content you added to a shared client workspace, such as session notes or feedback, belongs to that workspace and may stay available to its other members. Activity records are kept until they expire after 365 days.
11. Security
Information is encrypted in transit between your device and our services, and our cloud providers encrypt it at rest. Access requires an approved account and is limited by roles and permissions, and significant actions are recorded. No method of storage or transmission is completely secure, but we work to protect your information and to fix weaknesses quickly.
12. International transfers
zpqv is based in the United States, and our service providers may process information in the United States and other countries. When we transfer personal information out of the European Economic Area or the United Kingdom, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
13. Children
Kavi is a business tool and is not intended for anyone under 16. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.
14. Changes to this policy
We may update this policy as Kavi changes. We will change the effective date at the top when we do, and for significant changes we will tell users in the app or by email.
15. Contact us
For questions or requests about this policy or your information in Kavi:
zpqv, inc.1606 Headway Cir STE 9354
Austin, TX 78754, United States
Email: support@tiram.ai